Ramp
Systems Engineer, Corporate Security
$144K–$199K
New York, NY (HQ) · Hybrid · Full-time · Posted Sep 11, 2026
- Experience
- 3–5 years in Client Platform Engineer/Endpoint Engineering, Identity Access & Management, or Corporate Security
About the job
Build and operate automated security controls for Ramp’s internal device fleet, identity and access systems, and enterprise AI tools.
What you'll do
- Maintain device update policies, patching, configuration baselines, and compliance monitoring.
- Automate endpoint security agent remediation and identity posture fixes across devices and platforms.
- Configure Okta and enterprise AI controls, and automate platform integrations, reporting, and documentation.
What they ask for
- Hands-on macOS management at scale using MDM and macOS update mechanisms.
- Working knowledge of an identity provider, including SSO, authentication policies, SCIM provisioning, and conditional access.
- Scripting in Python, Go, or Bash, with experience automating against platform APIs.
- Experience with EDR and endpoint vulnerability management.
Nice to have
- osquery and Fleet or other query-based fleet visibility tooling.
- Cloudflare Zero Trust or other proxy, DNS, or network-layer enforcement, including TLS inspection.
Pay
$144K – $199K USD base salary
Tools
Jamf, Fleet, Kandji, Okta, Python, Go, Bash, CrowdStrike
AI focus
Implement and operate controls for enterprise AI usage, including identity-aware access, logging and retention, DLP where appropriate, and enforcement.
Model-written summary · the original posting is authoritative